AGL All Member Meeting Europe 2018

Today’s vehicles rely on multiple interconnected networks of Electronic Control Units (ECUs) that govern almost every function from engine timing and traction control to side-mirror adjustment and GPS. In-vehicle networks used for inter-ECU communication, most commonly the CAN bus, were not designed with cybersecurity in mind, resulting in communication that is not protected against corrupt devices connected to the bus. However, there is a multitude of attack vectors allowing attackers to control a device on the bus; reports abound of successful hacking of vehicles, by exploiting vulnerable devices and by spoofing messages. We present the IVAS, In-Vehicle Authentication Scheme. This is an in-place cryptographic scheme: the first CAN messaging solution to ensure both authentication and confidentiality without additional data such as authentication tags.